https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2022-34562.htmlhttps://patchthecve.com/cve/CVE-2022-34562.htmlWed, 17 Jun 2026 04:50:31 +0000MEDIUM 6.1: A cross-site scripting (XSS) vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the status box.https://patchthecve.com/cve/CVE-2022-34561.htmlhttps://patchthecve.com/cve/CVE-2022-34561.htmlWed, 17 Jun 2026 04:50:30 +0000MEDIUM 4.3: A cross-site scripting (XSS) vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the video description parameter.https://patchthecve.com/cve/CVE-2022-34560.htmlhttps://patchthecve.com/cve/CVE-2022-34560.htmlWed, 17 Jun 2026 04:50:30 +0000HIGH 7.1: A cross-site scripting (XSS) vulnerability in PHPFox v4.8.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the History parameter.https://patchthecve.com/cve/CVE-2023-46817.htmlhttps://patchthecve.com/cve/CVE-2023-46817.htmlWed, 17 Jun 2026 06:31:41 +0000CRITICAL 9.8: An issue was discovered in phpFox before 4.8.14. The url request parameter passed to the /core/redirect route is not properly sanitized before being used in a call to the unserialize() PHP function. This can be exploited by remote, unauthenticated attackers to inject arbitrary PHP objects into the a